Bhutan Computer Incident Response Team btcirt.bt

Critical Remote Code Execution in Drupal Core and the Entity List Module (CVE-2026-108097 and CVE-2026-108099) – 20261020011

Imported from official source

October 21, 2026 14:55 Announcement

Cybersecurity Classified by Officially

Severity CRITICAL Threat Category Vulnerability – Remote Code Execution Affected Platforms Drupal core Field UI module: 8.9.0 to before 10.6.19, […] The post Critical Remote Code Execution in Drupal Core and the Entity List Module (CVE-2026-108097 and CVE-2026-108099) – 20261020011 first appeared on Bhutan Computer Incident Response Team.

This is an extract. The publication continues at the source.

Read the original at the source: https://btcirt.bt/critical-remote-code-execution-in-drupal-core-and-the-entity-list-module-cve-2026-108097-and-cve-2026-108099-20261020011/

Officially imported this from Bhutan Computer Incident Response Team’s own source and shows an extract. If you work there, claiming the profile and verifying the domain lets you choose to show the full text here.

Provenance

Organization: Bhutan Computer Incident Response Team — imported from official source
Official source: https://btcirt.bt/category/newsevents/advisory/feed/ RSS
Imported: October 21, 2026 15:30
Versions: 1 recorded
Identity: https://btcirt.bt/?p=39194